Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e36332e302f32342d3234203d3e20323639383232.roa
File:                     3139302e36302e36332e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          y0P5Zze+gJ7tYKOJhfewFDwjy0FcVi+rz9UbgUV11WQ=
Subject key identifier:   D6:A5:5D:3A:21:86:F2:9C:BC:28:F0:87:79:E6:14:9B:63:62:3D:A7
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       482B275D88CF0340497B06D1FE6CCE860C8F8B70
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e36332e302f32342d3234203d3e20323639383232.roa
Signing time:             Mon 18 Nov 2024 19:00:00 +0000
ROA not before:           Mon 18 Nov 2024 18:55:00 +0000
ROA not after:            Mon 17 Nov 2025 19:00:00 +0000
asID:                     269822
IP address blocks:        190.60.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2b:27:5d:88:cf:03:40:49:7b:06:d1:fe:6c:ce:86:0c:8f:8b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Nov 18 18:55:00 2024 GMT
            Not After : Nov 17 19:00:00 2025 GMT
        Subject: CN=D6A55D3A2186F29CBC28F08779E6149B63623DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:52:86:4e:43:ac:fd:b8:d6:6c:34:a6:0c:
                    20:64:8d:29:da:60:53:8a:ae:f1:a7:e2:af:bb:85:
                    3d:86:18:da:55:8d:6c:3b:09:8f:35:76:d7:90:71:
                    2b:0f:3b:ef:2d:c5:20:9a:20:57:59:aa:23:31:12:
                    ed:02:06:e5:5d:ce:e0:88:5e:16:53:7a:25:16:4a:
                    a1:d5:9b:f5:cc:52:d5:ba:62:54:6c:8e:6f:2f:38:
                    eb:02:cb:f0:e6:52:cb:60:8c:d5:7b:05:95:75:4c:
                    0e:30:bd:bf:6a:43:86:8b:b0:b5:4a:f3:dc:42:df:
                    84:f5:00:0e:b1:f1:91:39:05:45:a7:ed:5b:f5:80:
                    cf:6c:d4:7e:1e:28:3c:97:d3:62:ad:13:d5:5e:b4:
                    10:42:1a:cb:a8:71:0c:2d:ff:f5:69:c2:06:94:da:
                    5e:c7:13:84:8f:32:54:c7:fc:16:fa:7d:7c:0a:36:
                    73:63:be:ee:31:f0:70:22:08:c3:d3:d9:e5:af:a3:
                    16:3b:aa:71:35:9b:10:a8:e6:12:89:bb:81:b2:8f:
                    1a:ae:1a:03:06:3e:64:64:5a:e3:b5:e6:af:5f:2d:
                    b1:65:1c:d1:9c:9e:60:17:85:eb:ba:6f:92:6c:b0:
                    36:95:af:20:61:33:2c:2d:53:93:f6:47:42:db:e7:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:5D:3A:21:86:F2:9C:BC:28:F0:87:79:E6:14:9B:63:62:3D:A7
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e36332e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:d4:40:7a:aa:ba:61:da:05:d7:0c:cf:1e:47:f3:57:a6:
         74:b4:d9:64:bf:be:9c:29:7f:52:2e:94:c7:ce:13:83:72:68:
         67:73:5d:c8:b9:00:ce:8b:2c:77:30:27:b9:51:7c:7d:5a:f8:
         cb:69:f9:f2:3f:d1:f0:ea:83:24:94:21:5e:f4:77:9e:30:16:
         72:e3:30:f7:16:4f:0c:ff:f3:70:12:57:ae:28:07:b2:4c:43:
         7f:0e:a0:a9:b6:ff:41:2b:93:83:10:fc:86:dc:91:4b:16:72:
         52:8b:30:ac:c2:e0:c9:6a:ff:a7:71:bb:d9:69:82:e6:92:66:
         f4:1c:fc:cf:91:b0:03:6e:04:24:88:45:4d:57:19:58:c4:0e:
         3c:81:b1:6e:95:e0:b8:14:a0:50:50:d6:68:ba:f2:ce:28:02:
         21:06:5d:ef:68:a8:f9:89:0e:30:28:78:83:9b:ad:bf:05:4a:
         e6:8a:49:99:f3:ae:d9:c4:7c:34:c0:73:08:f8:0c:46:50:b2:
         0d:64:fa:72:50:16:57:5e:f5:16:7c:fc:84:a2:02:09:81:1a:
         c3:4d:c6:75:08:b3:e3:68:ee:41:c2:4f:e5:38:b5:23:f8:7c:
         b2:61:8a:76:b9:6b:c1:40:2b:79:f7:03:68:92:65:f5:f4:46:
         b1:8e:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org